System, method and computer program product for location verification

ABSTRACT

A computer-implemented information verification method, system, and non-transitory computer readable medium, include acquiring a first measurement from a user device specific to a user device location, acquiring a second measurement from a second device specific to a second device location, comparing the first measurement with the second measurement, and verifying the user device is within a proximity of the second device to grant access for the user device to the second device, based on a result of the comparing.

BACKGROUND

The present invention relates generally to a location verificationmethod, and more particularly, but not by way of limitation, to asystem, method, and recording medium for verifying a location of adevice based on comparing a measurement from the user device locationwith a measurement from a second device location to determine whetherthe user device location is within a threshold proximity of the seconddevice to grant access for the user device to the second device.

Handheld (portable) devices send a location of a device based on aGlobal Positioning System (GPS). However, these coordinates can be fakedor misrepresented by an owner (or another user) of the device ifrequired to gain access to an access point that requires a locationverification.

Conventionally, access to specific resources can be given based on anidentification and a location of the user. The user is typically given adevice that can send a location (e.g., based on GPS coordinates). This,along with the credentials of the user is used to verify that a user isat a particular location. Thus, a two-tier security measure is in place.However, unless the device is tamper-resistant, the owner can fake thelocation of the device. Global attestation procedure is a way of makingthe job of a malicious user difficult by validating credentials fromsurrounding devices called “Brokers”. For example, access to a servercan be guaranteed only if the user's device is connected to the officenetwork through Wifi. In this case, the access point reports that theuser is physically connected to the office network and hence is likelyinside the office (or at least nearly).

Thus, the needs in the art include a location verification techniquethat is not susceptible to location spoofing due to the one-wayverification required from the device-to-server verification.

SUMMARY

In an exemplary embodiment, the present invention can provide acomputer-implemented information verification method, the methodincluding acquiring a first measurement from a user device specific to auser device location, acquiring a second measurement from a seconddevice specific to a second device location, comparing the firstmeasurement with the second measurement, and verifying the user deviceis within a proximity of the second device to grant access for the userdevice to the second device, based on a result of the comparing.

One or more other exemplary embodiments include a computer programproduct and a system.

Other details and embodiments of the invention will be described below,so that the present contribution to the art can be better appreciated.Nonetheless, the invention is not limited in its application to suchdetails, phraseology, terminology, illustrations and/or arrangements setforth in the description or shown in the drawings. Rather, the inventionis capable of embodiments in addition to those described and of beingpracticed and carried out in various ways and should not be regarded aslimiting.

As such, those skilled in the art will appreciate that the conceptionupon which this disclosure is based may readily be utilized as a basisfor the designing of other structures, methods and systems for carryingout the several purposes of the present invention. It is important,therefore, that the claims be regarded as including such equivalentconstructions insofar as they do not depart from the spirit and scope ofthe present invention.

BRIEF DESCRIPTION OF THE DRAWINGS

Aspects of the invention will be better understood from the followingdetailed description of the exemplary embodiments of the invention withreference to the drawings, in which:

FIG. 1 depicts a high-level flow chart for a location verificationmethod according to an embodiment of the present invention;

FIG. 2 depicts a user device to a plurality of other devicesmeasurements being compared according to an embodiment of the presentinvention;

FIG. 3 depicts a cloud computing node according to an embodiment of thepresent invention;

FIG. 4 depicts a cloud computing environment according to an embodimentof the present invention; and

FIG. 5 depicts abstraction model layers according to an embodiment ofthe present invention.

DETAILED DESCRIPTION

The invention will now be described with reference to FIGS. 1-5, inwhich like reference numerals refer to like parts throughout. It isemphasized that, according to common practice, the various features ofthe drawing are not necessarily to scale. On the contrary, thedimensions of the various features can be arbitrarily expanded orreduced for clarity. Exemplary embodiments are provided below forillustration purposes and do not limit the claims.

With reference now to FIG. 1, a location verification method 100according to an embodiment of the present invention includes varioussteps to measure and compare a type of measurement unique to thelocation of the user and the second device in order to grant access tothe second device for the user. As shown in at least FIG. 3, one or morecomputers of a computer system 12 according to an embodiment of thepresent invention can include a memory 28 having instructions stored ina storage system to perform the steps of FIG. 1.

Thus, a location verification method 100 according to an embodiment ofthe present invention may act in a more sophisticated and usefulfashion, and in a cognitive manner while giving the impression ofcognitive mental abilities and processes related to knowledge,attention, memory, judgment and evaluation, reasoning, and advancedcomputation. That is, a system is the to be “cognitive” if it possessesmacro-scale properties—perception, goal-oriented behavior,learning/memory and action—that characterize systems (i.e., humans) thatare generally agreed as cognitive.

As will described/illustrated herein, one or more embodiments of thepresent invention (see e.g., FIGS. 3-5) may be implemented in a cloudenvironment 50 (see e.g., FIG. 4). It is nonetheless understood that thepresent invention can be implemented outside of the cloud environment.

It is noted that the measurements acquired below are measurementsspecific to the location of the device. For example, temperature isacquired at the location of the device.

Referring now to FIG. 1, in step 101 a first measurement is acquiredfrom the user device 130 at the user device location. The firstmeasurement can include an audio clip that is acquired using recordingtechnology installed on the user device 130. In another embodiment, themeasurement can include, for example, weather parameters (e.g.,humidity, temperature, precipitation, etc.), light exposure (e.g., sunlight or unnatural light), barometric pressure, air quality, a videoclip, and an oxygen value in the air (e.g., oxygen value can vary withaltitude) acquired using various sensors on the user device 130.

That is, the first measurement is acquired to indicate a locationspecific parameter to the user device 130 (i.e., a first measurementunique to the location of the user device 130 and not a “spoofed”measurement). It is noted that metadata and metadata history can be usedto acquire different measurements of the user device 130. For example,temperature may commonly be the same in most rooms (i.e., roomtemperature). However, metadata history from the last time the user wasoutside can be used in order to acquire a temperature value of the userthat is “location specific” and compared with a temperature value from atrusted source. Similarly, a video can be captured prior to theconnection request between the user device 130 and the second deviceindicating that the user device 130 is entering a building where thesecond device resides.

In step 102, a second measurement from a second device 140 (i.e., adevice with which the user wants to connect (“pair”)) at a second devicelocation is acquired.

That is, the second measurement is acquired from the second devicelocation to indicate a location specific parameter of the second device140. It is noted that the second measurement is the same as the firstmeasurement such that the values can be compared (as described later).In some embodiments, the user device 130 and the second device 140communicate capabilities of the devices in order to acquire a first andsecond measurement that both devices are have installed a sensor capableof measuring the measurements. For example, the measurements will not bea video clip if the user device 130 does not include a video camera.

In step 103, a third measurement is acquired from one or more nearby(other) third devices 150 at a third device location. In step 103, themeasurement is preferably acquired from the perspective of the one ormore (other) third devices 150 (e.g., a third device in which the useris not requesting to pair but can also be compared to the measurement ofthe user device location). In some embodiments, all third devices 150(other than the second device 140) which are in proximity (e.g., withina predetermined distance) acquire the same measurement as the secondmeasurement and the first measurement. In some embodiments, the thirddevices 150 can acquire a different measurement than the secondmeasurement to compare with a different first measurement to provide ahigher level of security for granting access (i.e., the firstmeasurement and second measure can be temperature and the differentfirst measurement and the third measurement can be an audio clip).

In step 104, the first measurement from the user device location and thesecond measurement from the second device location are compared and adifference (if any) between the first measurement and the secondmeasurement is quantified. If the difference is less than apredetermined threshold, the location of user device 130 can beconsidered as verified (i.e., the user device location is within aproximity of the second device location).

In step 104, the comparison of the first measurement can be expanded toinclude a comparison with one or more (or each of) the thirdmeasurements from the third device 150. In one embodiment, the locationverification can include a comparison and determination of whether thefirst measurement is also within a predetermined threshold of the thirdmeasurement associated with a single third device 150 selected fromamong one or more multiple third device(s) 150 at the alleged location.In some embodiments, the location verification can require that thefirst measurement also be within a predetermined threshold difference ofmultiple third measurements associated with corresponding multiple thirddevice(s) 150 at the alleged location. In some embodiments, multiplethird measurements are averaged (e.g., the ambient sound in all theaudio clips) and the comparison with the first measurement is performedagainst such average to identify whether the result is within apredetermined threshold (i.e., whether the ambient sound of the audioclip recorded by the first device is within a predetermined threshold ofmatching the ambient sound of the third devices).

Step 104 performs the comparison to verify if the user device 130 is ata specific location because the first measurement, the secondmeasurement, and the third measurement will be within a predeterminedthreshold if the user is at the location specified (e.g., the user isnot faking (“spoofing”) a location of the user device 130).

For example, a list of devices near by which can corroborate a locationof the user device is detected and the user device and the nearbydevices record an audio clip (e.g., acquire a first measurement and asecond measurement) in which are compared and then computes a score todetermine how similar these clips are (e.g., a lower score indicatingthe audio clips are similar and hence possibly the devices are near asshown in FIG. 2 in the “measurement table 200”)

Such verification can take into account device characteristics, noiselevels, environment/terrain, etc. at the location. The allowabledifferences between the measurements can also be varied based on a givendevice's characteristics and/or the known environment at the location.Also, the host of the connection (e.g., the host of the second device)can set thresholds for a difference between the first measurement andthe second measurement.

FIG. 2 exemplarily shows an embodiment of the present invention in whichsteps 101, 102, and 103 (FIG. 1) acquire measurements from the device201 (i.e., the user device) and various nearby device ND_(1-n). The“measurements table 200” shows the results of Step 104 when themeasurement is an audio clip. For example, the ambient noise of theaudio clip acquired by ND₂ is most similar to the audio clip acquired bythe device 201 (e.g., 2.4 score difference). Depending on the thresholdvalue set by the grantor of access, if 2.4 is less than the thresholdvalue, access is granted. Similarly, an average of the ambient noise ofthe audio clips acquired by devices ND_(n) and the device 201 is 10.2.If the threshold is, for example, 5, access is denied because it islikely that the device 201 is not in a location nearby the device tryingto be connected to because the difference between the ambient noise ofthe audio clip of the device 201 and the nearby devices ND_(n) isgreater than the threshold value.

Thus, a two-way verification can be provided in which a value detectedby the user device is compared with a value detected by the seconddevice (e.g., the device in which the user wishes to connect) in orderto authorize the connection between the two devices.

Exemplary Hardware Aspects, Using a Cloud Computing Environment

Although this detailed description includes an exemplary embodiment ofthe present invention in a cloud computing environment, it is to beunderstood that implementation of the teachings recited herein are notlimited to such a cloud computing environment. Rather, embodiments ofthe present invention are capable of being implemented in conjunctionwith any other type of computing environment now known or laterdeveloped.

Cloud computing is a model of service delivery for enabling convenient,on-demand network access to a shared pool of configurable computingresources (e.g. networks, network bandwidth, servers, processing,memory, storage, applications, virtual machines, and services) that canbe rapidly provisioned and released with minimal management effort orinteraction with a provider of the service. This cloud model may includeat least five characteristics, at least three service models, and atleast four deployment models.

Characteristics are as follows:

On-demand self-service: a cloud consumer can unilaterally provisioncomputing capabilities, such as server time and network storage, asneeded automatically without requiring human interaction with theservice's provider.

Broad network access: capabilities are available over a network andaccessed through standard mechanisms that promote use by heterogeneousthin or thick client platforms (e.g., mobile phones, laptops, and PDAs).

Resource pooling: the provider's computing resources are pooled to servemultiple consumers using a multi-tenant model, with different physicaland virtual resources dynamically assigned and reassigned according todemand. There is a sense of location independence in that the consumergenerally has no control or knowledge over the exact location of theprovided resources but may be able to specify location at a higher levelof abstraction (e.g., country, state, or datacenter).

Rapid elasticity: capabilities can be rapidly and elasticallyprovisioned, in some cases automatically, to quickly scale out andrapidly released to quickly scale in. To the consumer, the capabilitiesavailable for provisioning often appear to be unlimited and can bepurchased in any quantity at any time.

Measured service: cloud systems automatically control and optimizeresource use by leveraging a metering capability at some level ofabstraction appropriate to the type of service (e.g., storage,processing, bandwidth, and active user accounts). Resource usage can bemonitored, controlled, and reported providing transparency for both theprovider and consumer of the utilized service.

Service Models are as follows:

Software as a Service (SaaS): the capability provided to the consumer isto use the provider's applications running on a cloud infrastructure.The applications are accessible from various client circuits through athin client interface such as a web browser (e.g., web-based e-mail).The consumer does not manage or control the underlying cloudinfrastructure including network, servers, operating systems, storage,or even individual application capabilities, with the possible exceptionof limited user-specific application configuration settings.

Platform as a Service (PaaS): the capability provided to the consumer isto deploy onto the cloud infrastructure consumer-created or acquiredapplications created using programming languages and tools supported bythe provider. The consumer does not manage or control the underlyingcloud infrastructure including networks, servers, operating systems, orstorage, but has control over the deployed applications and possiblyapplication hosting environment configurations.

Infrastructure as a Service (IaaS): the capability provided to theconsumer is to provision processing, storage, networks, and otherfundamental computing resources where the consumer is able to deploy andrun arbitrary software, which can include operating systems andapplications. The consumer does not manage or control the underlyingcloud infrastructure but has control over operating systems, storage,deployed applications, and possibly limited control of select networkingcomponents (e.g., host firewalls).

Deployment Models are as follows:

Private cloud: the cloud infrastructure is operated solely for anorganization. It may be managed by the organization or a third party andmay exist on-premises or off-premises.

Community cloud: the cloud infrastructure is shared by severalorganizations and supports a specific community that has shared concerns(e.g., mission, security requirements, policy, and complianceconsiderations). It may be managed by the organizations or a third partyand may exist on-premises or off-premises.

Public cloud: the cloud infrastructure is made available to the generalpublic or a large industry group and is owned by an organization sellingcloud services.

Hybrid cloud: the cloud infrastructure is a composition of two or moreclouds (private, community, or public) that remain unique entities butare bound together by standardized or proprietary technology thatenables data and application portability (e.g., cloud bursting forload-balancing between clouds).

A cloud computing environment is service oriented with a focus onstatelessness, low coupling, modularity, and semantic interoperability.At the heart of cloud computing is an infrastructure comprising anetwork of interconnected nodes.

Referring now to FIG. 3, a schematic of an example of a cloud computingnode is shown. Cloud computing node 10 is only one example of a suitablenode and is not intended to suggest any limitation as to the scope ofuse or functionality of embodiments of the invention described herein.Regardless, cloud computing node 10 is capable of being implementedand/or performing any of the functionality set forth herein.

Although cloud computing node 10 is depicted as a computer system/server12, it is understood to be operational with numerous other generalpurpose or special purpose computing system environments orconfigurations. Examples of well-known computing systems, environments,and/or configurations that may be suitable for use with computersystem/server 12 include, but are not limited to, personal computersystems, server computer systems, thin clients, thick clients, hand-heldor laptop circuits, multiprocessor systems, microprocessor-basedsystems, set top boxes, programmable consumer electronics, network PCs,minicomputer systems, mainframe computer systems, and distributed cloudcomputing environments that include any of the above systems orcircuits, and the like.

Computer system/server 12 may be described in the general context ofcomputer system-executable instructions, such as program modules, beingexecuted by a computer system. Generally, program modules may includeroutines, programs, objects, components, logic, data structures, and soon that perform particular tasks or implement particular abstract datatypes. Computer system/server 12 may be practiced in distributed cloudcomputing environments where tasks are performed by remote processingcircuits that are linked through a communications network. In adistributed cloud computing environment, program modules may be locatedin both local and remote computer system storage media including memorystorage circuits.

Referring again to FIG. 3, computer system/server 12 is shown in theform of a general-purpose computing circuit. The components of computersystem/server 12 may include, but are not limited to, one or moreprocessors or processing units 16, a system memory 28, and a bus 18 thatcouples various system components including system memory 28 toprocessor 16.

Bus 18 represents one or more of any of several types of bus structures,including a memory bus or memory controller, a peripheral bus, anaccelerated graphics port, and a processor or local bus using any of avariety of bus architectures. By way of example, and not limitation,such architectures include Industry Standard Architecture (ISA) bus,Micro Channel Architecture (MCA) bus, Enhanced ISA (EISA) bus, VideoElectronics Standards Association (VESA) local bus, and PeripheralComponent Interconnects (PCI) bus.

Computer system/server 12 typically includes a variety of computersystem readable media. Such media may be any available media that isaccessible by computer system/server 12, and it includes both volatileand non-volatile media, removable and non-removable media.

System memory 28 can include computer system readable media in the formof volatile memory, such as random access memory (RAM) 30 and/or cachememory 32. Computer system/server 12 may further include otherremovable/non-removable, volatile/non-volatile computer system storagemedia. By way of example only, storage system 34 can be provided forreading from and writing to a non-removable, non-volatile magnetic media(not shown and typically called a “hard drive”). Although not shown, amagnetic disk drive for reading from and writing to a removable,non-volatile magnetic disk (e.g., a “floppy disk”), and an optical diskdrive for reading from or writing to a removable, non-volatile opticaldisk such as a CD-ROM, DVD-ROM or other optical media can be provided.In such instances, each can be connected to bus 18 by one or more datamedia interfaces. As will be further depicted and described below,memory 28 may include at least one program product having a set (e.g.,at least one) of program modules that are configured to carry out thefunctions of embodiments of the invention.

Program/utility 40, having a set (at least one) of program modules 42,may be stored in memory 28 by way of example, and not limitation, aswell as an operating system, one or more application programs, otherprogram modules, and program data. Each of the operating system, one ormore application programs, other program modules, and program data orsome combination thereof, may include an implementation of a networkingenvironment. Program modules 42 generally carry out the functions and/ormethodologies of embodiments of the invention as described herein.

Computer system/server 12 may also communicate with one or more externalcircuits 14 such as a keyboard, a pointing circuit, a display 24, etc.;one or more circuits that enable a user to interact with computersystem/server 12; and/or any circuits (e.g., network card, modem, etc.)that enable computer system/server 12 to communicate with one or moreother computing circuits. Such communication can occur via Input/Output(I/O) interfaces 22. Still yet, computer system/server 12 cancommunicate with one or more networks such as a local area network(LAN), a general wide area network (WAN), and/or a public network (e.g.,the Internet) via network adapter 20. As depicted, network adapter 20communicates with the other components of computer system/server 12 viabus 18. It should be understood that although not shown, other hardwareand/or software components could be used in conjunction with computersystem/server 12. Examples, include, but are not limited to: microcode,circuit drivers, redundant processing units, external disk drive arrays,RAID systems, tape drives, and data archival storage systems, etc.

Referring now to FIG. 4, illustrative cloud computing environment 50 isdepicted. As shown, cloud computing environment 50 comprises one or morecloud computing nodes 10 with which local computing circuits used bycloud consumers, such as, for example, personal digital assistant (PDA)or cellular telephone 54A, desktop computer 54B, laptop computer 54C,and/or automobile computer system 54N may communicate. Nodes 10 maycommunicate with one another. They may be grouped (not shown) physicallyor virtually, in one or more networks, such as Private, Community,Public, or Hybrid clouds as described hereinabove, or a combinationthereof. This allows cloud computing environment 50 to offerinfrastructure, platforms and/or software as services for which a cloudconsumer does not need to maintain resources on a local computingcircuit. It is understood that the types of computing circuits 54A-Nshown in FIG. 4 are intended to be illustrative only and that computingnodes 10 and cloud computing environment 50 can communicate with anytype of computerized circuit over any type of network and/or networkaddressable connection (e.g., using a web browser).

Referring now to FIG. 5, a set of functional abstraction layers providedby cloud computing environment 50 (FIG. 4) is shown. It should beunderstood in advance that the components, layers, and functions shownin FIG. 5 are intended to be illustrative only and embodiments of theinvention are not limited thereto. As depicted, the following layers andcorresponding functions are provided:

Hardware and software layer 60 includes hardware and softwarecomponents. Examples of hardware components include: mainframes 61; RISC(Reduced Instruction Set Computer) architecture based servers 62;servers 63; blade servers 64; storage circuits 65; and networks andnetworking components 66. In some embodiments, software componentsinclude network application server software 67 and database software 68.

Virtualization layer 70 provides an abstraction layer from which thefollowing examples of virtual entities may be provided: virtual servers71; virtual storage 72; virtual networks 73, including virtual privatenetworks; virtual applications and operating systems 74; and virtualclients 75.

In one example, management layer 80 may provide the functions describedbelow. Resource provisioning 81 provides dynamic procurement ofcomputing resources and other resources that are utilized to performtasks within the cloud computing environment. Metering and Pricing 82provide cost tracking as resources are utilized within the cloudcomputing environment, and billing or invoicing for consumption of theseresources. In one example, these resources may comprise applicationsoftware licenses. Security provides identity verification for cloudconsumers and tasks, as well as protection for data and other resources.User portal 83 provides access to the cloud computing environment forconsumers and system administrators. Service level management 84provides cloud computing resource allocation and management such thatrequired service levels are met. Service Level Agreement (SLA) planningand fulfillment 85 provide pre-arrangement for, and procurement of,cloud computing resources for which a future requirement is anticipatedin accordance with an SLA.

Workloads layer 90 provides examples of functionality for which thecloud computing environment may be utilized. Examples of workloads andfunctions which may be provided from this layer include: mapping andnavigation 91; software development and lifecycle management 92; virtualclassroom education delivery 93; data analytics processing 94;transaction processing 95; and, more particularly relative to thepresent invention, the location verification method 100.

The descriptions of the various embodiments of the present inventionhave been presented for purposes of illustration, but are not intendedto be exhaustive or limited to the embodiments disclosed. Manymodifications and variations will be apparent to those of ordinary skillin the art without departing from the scope and spirit of the describedembodiments. The terminology used herein was chosen to best explain theprinciples of the embodiments, the practical application or technicalimprovement over technologies found in the marketplace, or to enableothers of ordinary skill in the art to understand the embodimentsdisclosed herein.

Further, Applicant's intent is to encompass the equivalents of all claimelements, and no amendment to any claim of the present applicationshould be construed as a disclaimer of any interest in or right to anequivalent of any element or feature of the amended claim.

What is claimed is:
 1. A computer-implemented information verification method, the method comprising: acquiring a first measurement from a user device specific to a user device location; acquiring a second measurement from a second device specific to a second device location; wherein the second device comprises a trusted device with access to a service available at the second device location and the user device is without access to the service at the second device location, comparing the first measurement with the second measurement; and verifying the user device is within a proximity of the second device to grant access for the user device to the service available at the second location with the second device, based on a result of the comparing, wherein a trusted user operating the trusted device attests to the user device location of the user device so that the user of the user device accesses the service available only to users in the second device location of the trusted user independently of activities on the second device.
 2. The method of claim 1, wherein the verifying is based on a difference between the first measurement and the second measurement being less than a predetermined threshold value.
 3. The method of claim 1, wherein the first measurement and the second measurement comprise an audio clip, and wherein an ambient noise of the first measurement is compared with an ambient noise of the second measurement to verify the proximity between the user device and the second device.
 4. The method of claim 1, wherein the first measurement comprises a same type of measurement as the second measurement.
 5. The method of claim 1, further comprising measuring a plurality of third measurements from a plurality of third devices, wherein the comparing compares the first measurement with at least some of the third measurements to verify a location of the user device.
 6. The method of claim 5, wherein the third devices are within predetermined distances from the user device location and the second device location.
 7. The method of claim 5, wherein the user device location is verified based on a difference between the first measurement and at least one of the third measurements being less than a predetermined threshold value.
 8. The method of claim 5, wherein the user device location is verified based on a difference between the first measurement and an average of all of the third measurements being less than a predetermined threshold value.
 9. The method of claim 5, wherein the third measurements include a different measurement parameter than the second measurement.
 10. The method of claim 1, wherein, when a type of the first measurement is unavailable, the acquiring acquires the first measurement from a metadata history on the user device at a last time that the first measurement was acquired.
 11. The method of claim 1, wherein a type of the first measurement and a type of the second measurement are matching and based on at least one of: a weather value; a light exposure value; a barometric pressure value; an air quality value; a video clip; and an oxygen value in the air.
 12. The method of claim 1, embodied in a cloud-computing environment.
 13. The method of claim 1, wherein the trusted user attests to the user device location of a second user request access and an ambient sound signature is used as a proof that both the trusted user and the second user are in a same location at a same time.
 14. A computer program product for location verification, the computer program product comprising a non-transitory computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform: acquiring a first measurement from a user device specific to a user device location; acquiring a second measurement from a second device specific to a second device location; wherein the second device comprises a trusted device with access to a service available at the second device location and the user device is without access to the service at the second device location, comparing the first measurement with the second measurement; and verifying the user device is within a proximity of the second device to grant access for the user device to the service available at the second location with the second device, based on a result of the comparing, wherein a trusted user operating the trusted device attests to the user device location of the user device so that the user of the user device accesses the service available only to users in the second device location of the trusted user independently of activities on the second device.
 15. The computer program product of claim 14, wherein the verifying is based on a difference between the first measurement and the second measurement being less than a predetermined threshold value.
 16. The computer program product of claim 14, wherein the first measurement and the second measurement comprise an audio clip, and wherein an ambient noise of the first measurement is compared with an ambient noise of the second measurement to verify the proximity between the user device and the second device.
 17. The computer program product of claim 14, wherein the first measurement comprises a same type of measurement as the second measurement.
 18. A location verification system, the system comprising: a processor; and a memory, the memory storing instructions to cause the processor to perform: acquiring a first measurement from a user device specific to a user device location; acquiring a second measurement from a second device specific to a second device location; wherein the second device comprises a trusted device with access to a service available at the second device location and the user device is without access to the service at the second device location, comparing the first measurement with the second measurement; and verifying the user device is within a proximity of the second device to grant access for the user device to the service available at the second location with the second device, based on a result of the comparing, wherein a trusted user operating the trusted device attests to the user device location of the user device so that the user of the user device accesses the service available only to users in the second device location of the trusted user independently of activities on the second device.
 19. The system of claim 18, embodied in a cloud-computing environment.
 20. The system of claim 18, wherein the verifying is based on a difference between the first measurement and the second measurement being less than a predetermined threshold value. 